Privacy
Privacy policy
Last updated: May 2025
We operate as an extension of your team, which means stewardship of your data, assets, and internal knowledge is non-negotiable. This document outlines how we protect that trust.
Information we collect
We only capture details that help us collaborate effectively and measure outcomes.
- Contact and company details that you submit through forms, scheduling links, or direct email.
- Project context such as creative briefs, brand systems, datasets, analytics exports, or automation requirements shared with us for delivery.
- Limited usage data from our marketing site gathered via privacy-friendly analytics. We use it to understand aggregate engagement—not to fingerprint individual visitors.
How we use your information
Every data point is tied to a specific operational purpose.
- Scoping work, creating statements of work, scheduling workshops, and billing retainers.
- Delivering design, content, automation, and advisory services with the right pods, tooling, and QA.
- Improving our playbooks—using anonymized patterns only—and notifying you about relevant product or security updates.
Legal basis & consent
We process data under the legitimate interest of providing agency services and, where required, explicit consent (for example, when you opt-in to updates). You can withdraw consent or request that we pause processing at any time by emailing privacy@blackbeard.media.
Retention & deletion
Project artifacts stay in secure workspaces for the duration of the engagement. We archive deliverables for up to 12 months so you can request copies, then purge or anonymize them unless regulations require longer retention.
If you need immediate deletion after a project, just send a request—our ops team will confirm once the purge is complete.
Your rights
- Access: request the data we store about your org.
- Correction: update incorrect or outdated information.
- Portability: receive structured exports for your records.
- Erasure: ask us to delete specific files or all records (subject to contractual/legal obligations).
Security & subprocessors
We enforce SSO + MFA on every system, log access, and segment environments by client. Preferred tools include Notion, Linear, Figma, Slack, and secure cloud storage—all configured with least-privilege roles.
When we need specialized infrastructure (for example, model hosting or translation), we only work with vendors that meet SOC 2/ISO 27001 or equivalent standards. A current list of subprocessors is available on request.
Need something specific?
For DPAs, security questionnaires, or subprocessor disclosures, email privacy@blackbeard.media. We respond within one business day and can work with your legal or procurement team to finalize the paperwork.